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METHOD AND ARRANGEMENT FOR GENERATING BINARY SEQUENCES 



OF RANDOM NUMBERS 



des cription 



The present invention relates to an arrangement for generating binary sequences of 

A 

rsindom numbers. 

Random numbers are used in mathematical simulation of random processes, in 
random sampling and in cryptology in particular. Due to increasing high-bit-rate 
,~ digital communications over publically accessible communication channels, 

^ guaranteeing the confidentiality and authenticity of the information transmitted has 

5:j{ 10 become a central problem. Good cryptographic codes are sequences of random binary 

ry numbers. For secure encoding, preferably a random code of this type is selected; this 

code is as long as the message itself and is used only once. 

ry Essentially two different options are available for generating random numbers: 

1 . Pseudo-random numbers generated by mathematical algorithms 
Essentially, true random numbers cannot be generated by a computer, which operates 
completely deterministically. Therefore, the random numbers generated by 
mathematical algorithms and provided by many programs are never truly random. 
20 Pseudo-random numbers, developed from a shorter, truly random nucleus are an 

improvement. 

In any case, however, a certain number of sequences that are not usable from the 
beginning (weak keys) must be expected in generating pseudo-random numbers by 
25 the methods described above, and in any case, odd correlations must be expected. 



2. Random numbers based on physical methods 



These methods make use of the random character of certain physical processes. 

Even with the physical methods, there are those which are fundamentally 
deterministic, but are so complex that they cannot be reproduced. This would include, 
for example, a coin throw of heads or tails or lotto machines. These methods generate 
a deterministic chaos, which may be considered random because the initial conditions 
of the generator in generating each individual random number are always slightly 
different each time, without this difference being quantifiable. The physical methods 
also include elementary processes, such as those in quantum mechanics. Such 
processes are naturally basically random. Random numbers generated by physical 
processes therefore come closer to the concept of a random sequence than do random 
numbers generated by an algorithm. 

There is a known solution utilizing the natural quantum process of the electromagnetic 
noise of a resistor or a diode to generate random bit sequences (see Manfred Richter: 
"Ein Rauschgenerator zur Gewinnung von quasi idealen Zufallszahlen fur die 
stochastische Simulation" [A noise generator for generating quasi-ideal random 
numbers for stochastic simulation]. Dissertation RWTH Aachen; 1992). 

However, such methods can be manipulated externally by superimposing an arbitrary 
predetermined "noise" on the quantum noise, e.g., from incident electromagnetic 
waves. Since it is not easy to separate quantum noise fi*om such an externally 
imposed pseudo-noise, these methods are not considered to be secure. 

In addition, there are known methods of generating random numbers based on 
radioactive decay processes (see Martin Gude: "Ein quasi-idealer 
Gleichverteilungsgenerator basierend auf physikalischen Zufallsphanomenen" [A 
quasi-ideal uniform distribution generator based on physical random phenomena]. 
Dissertation, RWTH Aachen 1987). This method is very suitable for generating 
random sequences because of the high energy of the resulting particles, but in addition 



to the very real risks, due in particular to the potentially harmful effect of radioactive 
radiation on humans, there is also an irrational prejudice against radioactivity on the 
part of some of the population, so that radioactive processes cannot readily be used for 
random generation. 

5 

Another known method of generating random sequences is based on the process of 
selecting the path of individual photons on a beam splitter (see J. G. Rarity et al.: 
^ "Quantum random-number generation and key sharing" J. Mod. Opt. 41 , p. 2435, 

^ ^^^^ method, a light quantum is reflected or transmitted on a 

10 semitransparent mirror, for example; two detectors record the light quantum and their 



ry 
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15 



displays represent the "0" or " 1 " of the random sequence. 



^^^^ ^ 

1.1 -The object of the present invention is to provide a method and an arrangement for 

ly ^ 

\ 7j generating binary sequences of random numbers to avoid the disadvantages described 



generatmg bmary sequences oi random numbers to avoid the disadvantages described 
above^^^ i s mctho d^s h o uld be less expensive thai^^rtTe-4 cno\vn - mGthod3 and should be- 
suitable for integration onto a chip card without any great complexity. 



Thi s o hjprt is achi e v e d according to the prcsciit iiwcntioii b>' the cha racterizing ^ 
_jQat mcs uf Pa l cnt Claim 1 . AUvaiUdge u us embodiments and refinements arc dc r ivcd - 
20 ffonrihe subclaimii'. 

^ The method according to the present inventiot ^s based -eft the known principle of 
selecting the path of individual photons on a beam splitter. With the method 
according to the present invention, ultraviolet, visible or infrared light strikes an 
25 optical beam splitter, e.g., a semitransparent mirror. Two detectors which can detect 

individual photons register the photons and define the "0" or the "1" of the random 
sequence via the displays assigned to them and thus define the random sequence itself. 

With the method according to the present invention, a photon source of a low power 
30 and thus also small dimension is used as light source L instead of the photon source 



3 



customary in the past, such as an attenuated laser beam source. For example, 
• attenuated laser diodes, normal diodes (LEDs), thermal light sources such as halogen 
lamps, spectral lamps or pinched light sources are suitable. In addition, according to 
the present invention, a first beam splitter STl, preferably a trigger beam splitter, is 
5 inserted into the beam path of light source L upstream from second beam splitter ST2. 

The photons/photon swarms emitted during a predefined measurement time by light 
source L according to the random principle are split by beam splitters ST 1 and ST2 
arranged in the beam path of light source L and are detected by detectors (trigger 
detector DT for beam splitter STl and detectors Dlo and D2, for beam splitter ST2) 
10 downstream from beam splitters STl and STl according to the split. 

Detectors DT, DIq and D2i are connected to detection unit E. A random number is 
generated only if the photons registered at the individual detectors DT, DIq and D2, 
correspond in their totality to a previously defined photon count scheme which has 
1 5 been input into the computer of the detection unit. 

Tlic madicmatical p iiuciple s and ihe-posg ibl e e mbo d impnts. <>£-the -method accnrdin ; ? 
^ to th e preo e nt invention ane explained in greater detail below with reference to^ ^igurc * ^ 



!^sour^2'has sifch aweak light intensity that it emits individual photons or it 
always emits photon swarms of n photons with a certain probability. These photon 
swarms are then either resolved in detectors DT, DIq and D2i or counted as a whole as 
a single result. Probability p^ that n photons will arrive at the detector at the same 
25 time or will be counted as a single result is described by a Poisson distribution. 

—n 

P„-\e-' (1) 

30 n is the average number of photons at the detector per measurement time. Although 

the light source has different statistics if it is thermal light (halogen lamp), chaotic 
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light (spectral line) or laser light, equation (1) applies to all these light sources as long 

as the coherent time of a thermal or chaotic source is short in comparison with the 

measurement time of the detector. Equation (1) always applies to laser light. With a 

simple beam splitter with two detectors, as illustrated by beam splitter ST2 and 

detectors DIq and D2i in Figure 1, the electronics of the counting processes are set up 

so that a result is only ever counted when only one of detectors Dl© or D2, responds. 

If both detectors DIq and D2] respond within the measurement time, the counting 

event is discarded. If a swarm of photons is split on beam splitter ST2, the result is 

not used. A counting event is used only if the swarm enters detector DIq completely 

or enters detector D2| completely and is counted. With a swarm of n photons, this 

means that only 2 of n+1 events are counted, and therefore, equation (1) is to be 
2 

multiplied by to describe the probability with which counting events occur with 

« + 1 

a photon swarm. Therefore, probability p^ that a usable counting event will occur at 
an average photon count n is as follows for the simple beam splitter, corresponding to 
beam splitter ST2, and one of the light sources L of a low power described above 

pjj^^^ = -^e " • simple beam splitter (2) 

n\ n + 1 

According to the present invention, another beam splitter ST 1, preferably a trigger 
beam splitter, is connected upstream from simple beam splitter ST2 (Figure 1). As in 
the first case, the electronic counters of both detectors DIq and D2, are connected so 
that a random number is determined only when only one or only the other detector 
DIq or D2, responds. In addition, however, trigger detector DT of beam splitter STl 
must not respond in this case. Transit time effects between trigger detector DT of first 
beam splitter STl and detectors DIq and D2, of second beam splitter ST2 are 
compensated optically or electronically. If there is a swarm of n photons and at least 
one photon of the swarm reaches trigger detector DT, the event is not counted. An 
event is counted as (0) or (1) only if no photon goes over first beam splitter STl to 



trigger detector DT and also if all n photons at second beam splitter ST2 go either 
completely to detector DIq or completely to detector D2,. The probability that no 
photon of the swarm will go to trigger detector DT and the rest will go completely to 
one of detectors DIq or D2, is 4/((n+l)(n+2)), i.e., the probability p^^^* that a counting 
event will occur with a swarm of n photons is 

(2) _ «" -^r . 4 beam splitter ST2 with 

^" „i ^ («+!)(« +2) h^om splitter STl connected upstream 

Equation (3) applies to the case when beam splitter STl has splitting ratio 1/3 : 2/3, 
but beam splitter ST2 has splitting ratio 1/2 : 1/2. In this case, three detectors DT, DIq 
' - and D2, are weighted equally. Other splitting ratios are possible, but they alter the 

, probabilities according to equation (3). 

1.3 

fy The method uood hore makes it progressively less likely that, with an increasing 

number n of photons emitted during a predefined measurement time, an n-photon 
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swarm will lead to a counting event and thus to a random number. However, there is 
an increase in the probability that the ideal case in terms of quantum mechanics will 
20 occur, namely generation of a random event by a single photon on the beam splitter. 

□ Multi-photon events, which in the limit case of greater than n go into the conventional 

state, are suppressed. Thus, according to the present invention, weak lasers, chaotic or 
thermal light sources can be used as random generators. 

25 An arrangement of more than one trigger beam splitter in the beam path between light 

source L and beam splitter ST2 is also conceivable. The trigger detectors of these 
additional trigger beam splitters are also connected to detection device E. In such an 
embodiment, the photons detected during the predefined measurement time are 
registered in the detection device in accordance with their assignment to the individual 

30 trigger beam splitters (including beam splitter ST2) and are likewise compared with a 

predetermined photon scheme stored in detection device E. In such an embodiment. 
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photon swarms are suppressed to an even greater extent. Random events are recorded, 
for example, only when none of the trigger detectors responds. 

Another defined or variable photon scheme may also be selected with an embodiment 
having multiple trigger detectors in the beam path of light source L. For example, the 
photon scheme may include the fact that the trigger detector of every second trigger 
beam splitter must respond or that only the trigger detector of the first and seventh 
trigger beam splitter must respond. In each of these cases, the counting probability for 
the photon swarm is reduced. 



An interesting example is an arrangement according to Figure 1 , where the random 

OJUL 

events at second beam splitter ST2 are counted only when one or more photon^ifr^ 
registered by trigger detector DT of beam splitter STl . In this case, swarms wdth only 
one photon are not used at all for random generation. Since detectors today also have 



ry 
y 

1^ 1 5 some very unpleasant properties, such as a low quantum efficiency and dead times, 

ry 

the trade-in for additional trigger beam splitters is also additional electronic problems 

^ and higher costs. Thus, in practice, preferably only one additional trigger beam 

i;3 Splitter is used. 
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List of reference notation 



L light source 

STl first beam splitter (trigger beam splitter) 
ST2 second beam splitter 
E detection device 

DT trigger detector of the first beam splitter 


J ill h 1 1 nf ihr rpf^pnd bf^?^m s-plittpp . 
1- 

n number of photons emitted by the light source during a defined measurement 
time 
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